$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/aaf2e82c-aef8-3a15-b2da-39b3835bfb18.roa File: aaf2e82c-aef8-3a15-b2da-39b3835bfb18.roa (raw, json) Hash identifier: Pdxnt0gWfrPTsiZXnIyHro0FKg1VG3wvb7V8L4mI9BI= Subject key identifier: D0:88:EF:20:5F:69:DD:83:F8:AE:9A:F4:D7:19:BF:F4:3B:1A:B2:CD Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584930DE7D378658FD538A8E7F20 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/aaf2e82c-aef8-3a15-b2da-39b3835bfb18.roa Signing time: Sat 15 Mar 2025 01:00:39 +0000 ROA not before: Sat 15 Mar 2025 01:00:39 +0000 ROA not after: Fri 13 Jun 2025 01:00:39 +0000 asID: 4213 IP address blocks: 2001:470:3a2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:30:de:7d:37:86:58:fd:53:8a:8e:7f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 15 01:00:39 2025 GMT Not After : Jun 13 01:00:39 2025 GMT Subject: CN=bff2e5f5-d7f1-4abe-b7aa-9a37bc70638c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:54:c9:48:82:d4:db:9c:f7:94:46:48:94:33: 90:bb:db:c7:c0:70:0a:27:77:c0:46:5d:d7:c9:7d: 89:b0:03:9f:c4:35:3a:d9:aa:63:35:83:1b:02:2c: 3a:06:dd:60:b9:36:8d:77:b7:29:29:68:aa:66:f7: 66:50:c6:5b:d6:ba:7f:10:87:c7:31:bf:cc:0c:0e: 3c:e8:67:73:36:81:a4:64:5b:4a:e2:aa:5b:d9:c6: 74:24:89:7d:d3:9a:e3:a6:e2:ba:d8:db:8d:03:7f: e7:e6:6f:d2:98:43:0b:31:06:05:be:a8:33:0b:f1: d2:8d:c2:79:35:c6:44:e0:13:ef:b9:17:33:8f:38: f7:94:0a:9c:17:65:f1:45:55:90:a5:14:81:de:75: ed:f0:1e:de:16:82:25:79:84:70:14:7e:a3:37:3a: 3f:fa:9b:e2:53:30:b8:e8:da:2e:78:37:d0:0f:2c: 46:2a:ad:a1:57:50:e2:9c:6d:23:b2:fe:2e:af:4f: 2c:36:bc:98:6c:98:e6:ac:0a:23:1c:4e:26:15:10: 69:c9:20:2d:86:93:74:b9:52:e1:4c:72:37:09:86: 67:a2:c6:04:25:54:37:b1:b5:f2:4e:83:e8:9d:ea: bc:2e:4d:f6:cf:17:c4:9c:05:4e:7a:ca:f6:ef:d2: 98:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:88:EF:20:5F:69:DD:83:F8:AE:9A:F4:D7:19:BF:F4:3B:1A:B2:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/aaf2e82c-aef8-3a15-b2da-39b3835bfb18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3a2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:7c:43:12:ad:99:e9:41:ea:cc:ab:cb:59:4c:bb:57:0e:86: 11:02:88:d7:ca:0e:81:c9:a8:81:5c:8d:96:25:77:25:97:f9: fe:d0:2c:9c:36:a6:1c:24:26:87:36:4e:aa:81:10:61:8d:3d: 14:95:b2:a7:8f:53:3a:f7:e4:84:d8:6f:fe:13:32:49:72:f3: bb:a9:df:e3:b0:f2:74:92:ef:7a:4d:70:52:08:70:e7:eb:75: ca:31:ef:5a:bc:77:96:c1:9b:27:4c:1c:c0:42:91:18:da:dc: 2a:ec:d8:4d:2d:91:f3:ed:eb:d1:bf:a8:a3:3a:44:16:a2:6a: 8a:63:a0:de:57:ca:21:88:37:cd:5a:5f:ae:75:29:92:18:ed: 42:07:dd:62:e4:7e:90:8b:d5:f6:e5:47:2c:f1:b3:47:a2:d0: dd:29:4d:93:fb:b7:46:8e:11:81:a6:36:eb:45:80:da:39:a2: 7f:8a:88:de:d1:b4:a4:c4:d8:da:74:af:2d:2e:ad:ed:47:ff: a8:7a:5d:da:ec:59:c8:8f:a8:da:d4:14:d9:42:19:12:a1:b6: 1a:99:d9:ba:3c:8b:4d:07:2d:e4:c5:cf:4a:5d:e1:93:2a:2e: d6:9d:64:e8:8d:b6:10:0b:f3:19:94:84:12:80:11:0a:e5:69: 1d:fd:fd:61 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkw3n03hlj9U4qOfyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDMxNTAxMDAzOVoXDTI1MDYxMzAxMDAzOVowLzEtMCsGA1UEAxMk YmZmMmU1ZjUtZDdmMS00YWJlLWI3YWEtOWEzN2JjNzA2MzhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslTJSILU25z3lEZIlDOQu9vHwHAKJ3fARl3X yX2JsAOfxDU62apjNYMbAiw6Bt1guTaNd7cpKWiqZvdmUMZb1rp/EIfHMb/MDA48 6GdzNoGkZFtK4qpb2cZ0JIl905rjpuK62NuNA3/n5m/SmEMLMQYFvqgzC/HSjcJ5 NcZE4BPvuRczjzj3lAqcF2XxRVWQpRSB3nXt8B7eFoIleYRwFH6jNzo/+pviUzC4 6NoueDfQDyxGKq2hV1DinG0jsv4ur08sNryYbJjmrAojHE4mFRBpySAthpN0uVLh THI3CYZnosYEJVQ3sbXyToPoneq8Lk32zxfEnAVOesr279KY3QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNCI7yBfad2D+K6a9NcZv/Q7GrLNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYWFmMmU4MmMtYWVmOC0z YTE1LWIyZGEtMzliMzgzNWJmYjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAOi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACB8QxKtmelB6syry1lMu1cOhhECiNfKDoHJqIFcjZYldyWX+f7Q LJw2phwkJoc2TqqBEGGNPRSVsqePUzr35ITYb/4TMkly87up3+Ow8nSS73pNcFII cOfrdcox71q8d5bBmydMHMBCkRja3Crs2E0tkfPt69G/qKM6RBaiaopjoN5XyiGI N81aX651KZIY7UIH3WLkfpCL1fblRyzxs0ei0N0pTZP7t0aOEYGmNutFgNo5on+K iN7RtKTE2Np0ry0ure1H/6h6XdrsWciPqNrUFNlCGRKhthqZ2bo8i00HLeTFz0pd 4ZMqLtadZOiNthAL8xmUhBKAEQrlaR39/WE= -----END CERTIFICATE-----Generated at Fri Apr 4 17:43:20 2025 by rpki-client